CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2019-13243
https://notcve.org/view.php?id=CVE-2019-13243
IrfanView 4.52 has a User Mode Write AV starting at image00400000+0x00000000000249c6. IrfanView versión 4.52 tiene un User Mode Write AV iniciando en image00400000+0x00000000000249c6. • https://github.com/apriorit/pentesting/blob/master/bugs/irfanview/0x00000000000249c6.md • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2019-13242
https://notcve.org/view.php?id=CVE-2019-13242
IrfanView 4.52 has a User Mode Write AV starting at image00400000+0x0000000000013a98. IrfanView versión 4.52 tiene un User Mode Write AV iniciando en image00400000+0x0000000000013a98. • https://github.com/apriorit/pentesting/blob/master/bugs/irfanview/0x0000000000013a98.md • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-15745
https://notcve.org/view.php?id=CVE-2017-15745
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x000000000002ca2e." IrfanView 4.50 - 64bit, con la versión del plugin CADImage 12.0.0.5, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x000000000002ca2e". • https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15745 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-15744
https://notcve.org/view.php?id=CVE-2017-15744
IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Read Access Violation on Control Flow starting at CADIMAGE+0x00000000003d35a7." IrfanView 4.50 - (64bit), con la versión del plugin CADImage 12.0.0.5, permite que los atacantes ejecuten código arbitrario o que provoquen una denegación de servicio mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con "Read Access Violation on Control Flow starting at CADIMAGE+0x00000000003d35a7". • https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15744 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-15750
https://notcve.org/view.php?id=CVE-2017-15750
IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x0000000000009ae0." IrfanView 4.50 - 64bit, con la versión del plugin BabaCAD4Image 1.3, permite que los atacantes provoquen una denegación de servicio o, posiblemente, otro impacto sin especificar mediante un archivo .dwg manipulado. Esta vulnerabilidad está relacionada con "Read Access Violation starting at BabaCAD4Image!ShowPlugInOptions+0x0000000000009ae0". • https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-15750 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •